Updating CORS in readme, refs #6