Provide public accessor to CorsFeature.AllowOriginWhitelist