Update README.md

Add message about CORS.