added cors headers. set origin domain.
updated readme