readme has cors issue since served from github