updated README.md // fixed CORS bug?