update readme; tweak callback when not defined; add support for CORS