[doc] Document the CORS options
[fix] Don't namespace options under CORS.
[fix] Don't send CORS headers for the client or other requests.
[fix] Also apply CORS headers to our client file.
[fix] Fix broken table due to new line