Added some documentation, added '/' as the path for cookies on domains other than *.jhu.edu
Added 'Access-Control-Allow-Origin' header to response from POST request so that the requseting server could get data back.
Created embasssy.verifyReferer to verify that the domain making the request is on our whitelist.
Made it possible to send back data to the ambassador.
Added readme.