cors fixes to resources/public host js plus readme