small corrections to config.sample.php

A few small tweaks for clarity, and I think the original trusted domains example had incorrect syntax

@MorrisJobke @LukasReschke 
Use `.htaccess` as another example because this is blocked per default and changing this can lead to severe security implications.