Update notes for submitted changes

* Add details on HTTP headers for CORS supported by api