Cors Storage Security | Understanding Cors Rule And How The Vary Header Is Set