added whitelist to cors docs

[sebstec]

Issue

we should use a origin whitelist in case of allowing credentials in cors

Solution and steps

use a whitelist in the cors hook updated docs

Checklist

• [ x] Add/update/check docs (code comments and docs/ folder).
• [ ] Add/update/check tests.
• [ ] Update/check the cli generators.