docs update
fixing some csrf stuff
edited cors
updated docs