add cors example to readme