add instructions to readme
implement CORS