Improve documentation for CORS

[sriddell]

Improve documentation around required/optional plugins, particularly for CORS. The default config settings contains the CORS configuration, implying that CORS is supported by default, but mention of including the plugin is actually at the end of the docs. Would be more useful to have the installation section list all plugins that are required/optional and what they do.