README.md: add curl example for CORS request