fix cors README.md