Turn cors on by default
Update readme with heroku example