take that same origin policy

also the readme is different now