Note on quoting cors headers is misleading

[williamhoyle]

Description:

Minor documentation issue.

The Cors Configuration section of the SAM model doc has the following note:

NOTE: HTTP spec requires the value of Allow properties to be a quoted string. So don't forget the additional quotes in the value. ie. "'www.example.com'" is correct whereas "www.example.com" is wrong

The http spec doesn't require the allow properties to be a quoted string. The reason that the values need to be quoted here is so that they are interpreted as literal values (i.e. not templates).