updated docs with cors headers example