Update notes for submitted changes

* Add CORS mention to object storage sec of confref