Clarify CORS behavior for report uploads#97

dcreager merged 2 commits intow3c:masterw3c/reporting:masterfrom

dcreager:corsdcreager/reporting:corsCopy head branch name to clipboard