Updated readme; code cleanup

added headers to enable CORS in express; not sure if this is necessary.