Changes

==Same Origin Policy==

Same origin policy should not be enforced for certified apps or privileged apps, since each app has its own cookie store. The app would have to declare its intent to bypass same-origin policy.

==Format for privileged and certified apps==