docs: describe CORS issue on explore.aap.aai.ebi.ac.uk

CHANGELOG.md

+<a name="1.0.0-beta.7"></a>
+# [1.0.0-beta.7](https://gitlab.ebi.ac.uk/tools-glue/ng-ebi-authorization/compare/1.0.0-beta.6...1.0.0-beta.7) (2019-02-34)
+
+### Features
+* improved documentation
+
 <a name="1.0.0-beta.6"></a>
 # [1.0.0-beta.6](https://gitlab.ebi.ac.uk/tools-glue/ng-ebi-authorization/compare/1.0.0-beta.5...1.0.0-beta.6) (2019-01-24)
 

README.md

@@ -5,6 +5,8 @@ on EBI's Authentication and Authorization Profile (AAP) infrastructure. After
 successful login, a JWT token is stored on the browser (via cookie, local or
 session storage).
 
+Because of CORS, if the library is tested against 'explore.api.aai.ebi.ac.uk' origin should be localhost:4200.
+
 [See example in stackblitz](https://stackblitz.com/github/esanzgar/ng-ebi-authorization-replica).
 
 ## Installation

package.json

 {
   "name": "ng-ebi-authorization",
-  "version": "1.0.0-beta.6",
+  "version": "1.0.0-beta.7",
   "license": "Apache-2.0",
   "scripts": {
     "ng": "ng",

src/app/app.component.html

@@ -3,7 +3,9 @@
     <h1>
         Auth testing app
     </h1>
-    <h2>If tested against explore.aap.ebi.ac.uk, some methods only works from localhost:4200 (because of CORS)</h2>
+    <h2>
+        Because of CORS, if the library is tested against 'explore.api.aai.ebi.ac.uk' origin should be localhost:4200.
+    </h2>
 </div>
 <div class="spread separator">
     <button (click)="auth.openLoginWindow({ttl: '1'})">ELIXIR login small