Document the cors-allowed-origin directive