Adds README note about CORS_ORIGIN

[#76996830]