Document how to configure or enable CORS support

I added a section in README.md and details in docs/cors.rt