added more info on CORS