Added Access-Control-Allow-Origin and X-Frame-Options to the default http headers
updated README