update info o CORS in README