Improve CORS support

Add `Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept;` to headers in order to allow for cross-origin AJAX requests.

Also updated README.md to reflect the options currently in --help