diff --git a/README.md b/README.md
index 756330ea..576c3d02 100644
--- a/README.md
+++ b/README.md
@@ -24,7 +24,8 @@
 3. [Install](#Install)
 4. [Architecture](#Architecture)
 5. [Status of the project](#Status-of-the-project)
-6. [Licensing and contributing](#Licensing-and-contributing)
+6. [Links](#Links)
+7. [Licensing and contributing](#Licensing-and-contributing)
 
 ## 🎉🎉🎉 New versions 🎉🎉🎉
 
@@ -387,6 +388,16 @@ Any feedback is welcome.
 
 Versions before 1.0 do not promise syntax/API stability or storage compatibility.
 
+## Links
+
+* [Project page](https://cozodb.org/)
+* [Documentation](https://docs.cozodb.org/en/latest/)
+* [Main repo](https://github.com/cozodb/cozo)
+* [Rust doc](https://docs.rs/cozo/)
+* [Issue tracker](https://github.com/cozodb/cozo/issues)
+* [Project discussions](https://github.com/cozodb/cozo/discussions)
+* [User reddit](https://www.reddit.com/r/cozodb/)
+
 ## Licensing and contributing
 
 This project is licensed under MPL-2.0 or later.
diff --git a/cozo-bin/src/server.rs b/cozo-bin/src/server.rs
index 9c762ecf..9e5790fc 100644
--- a/cozo-bin/src/server.rs
+++ b/cozo-bin/src/server.rs
@@ -16,7 +16,7 @@ use std::thread;
 
 use axum::body::{boxed, Body, BoxBody};
 use axum::extract::{Path, Query, State};
-use axum::http::{Method, Request, Response, StatusCode};
+use axum::http::{header, HeaderName, Method, Request, Response, StatusCode};
 use axum::response::sse::{Event, KeepAlive};
 use axum::response::{Html, Sse};
 use axum::routing::{get, post, put};
@@ -182,7 +182,8 @@ pub(crate) async fn server_main(args: ServerArgs) {
     };
     let cors = CorsLayer::new()
         .allow_methods([Method::GET, Method::POST, Method::PUT, Method::DELETE])
-        .allow_origin(Any);
+        .allow_origin(Any)
+        .allow_headers([header::CONTENT_TYPE, HeaderName::from_static("x-cozo-auth")]);
 
     let app = Router::new()
         .route("/text-query", post(text_query))