Update README.md with CORS option