Document the CORS/preflight headers