update readme to include hosts setup for cors