add Access-Control-Allow-Origin
web
update readme
readme