Specifies a list of origins that should be allowed to make cross-origin calls.
Are credentials allowed in CORS requests? Defaults to false.
false