Added CORS on iFrames

And AJAX samples + studies from MSFT 70-480