Added info about CORS to README