Update README.md
Add conditional check when cors.allowOrigin is *

Set to null to revert to default functionality