Allow CORS and update readme