Rely on CORS in development too
Update README