[webappsec] WG Note: CORS for developers

Add a description of [webappsec] WG Note: CORS for developers