CORS: Disable by default

In order to deliver a more secure out-of-the-box configuration this commit
disables cross-origin resource sharing by default. It is possibly to enable it and create a more finegrained configuration anytime using the existing cors configuration parameters.

Closes #7151