Allow cross-origin ajax requests
Hardcode secret key given by heroku
Move API doc to readme and reformat
Merge pull request #1 from naoisegolden/api

Added readme