docs($sce/insecurl): mention port in the same origin policy

Closes #5759

The default trusted origin appears to be the same protocol+domain+port,
non just protocol+domain.
I patched the doc accordingly.