document how to use cors-it