Allow cross-origin ajax requests
Hardcode secret key given by heroku
Move API doc to readme and reformat
Merge pull request #1 from naoisegolden/api

Added readme
Merge pull request #2 from xsimov/api

merge into master