Set default model paths to load actual ML models instead of demo mode

Allow Hugging Face Spaces cookie sharing and CORS origins

Add SESSION_COOKIE_SECURE for HTTPS sessions

updated readme

added app.py