allow specifying http allowed sources
updated README