Update README.md

Caveat about using "*" in CORS
Merge pull request #303 from jaimegago/master

Update README.md