Tweak README for new users

describe how to setup `CORS_DOMAIN`