cors headers into a separated middleware
moved app.use cors headers middleware
updated README
changed bodyParser to two middlewares, improve
improved the security, using OAUTH2