examples: remove invalid cors example

Not only is the example not even standards-compliant, but it
encourages bad security settings and practices.