Add cross-origin requests note