add instructions for Chrome command line switches to ignore CORS