add SENTRY_ALLOW_ORIGIN. allows JavaScript clients to submit cross-domain error reports.
update README
update environment.example
added a CHANGELOG entry