fix: CORS_ORIGIN_WHITELIST was renamed to CORS_ALLOWED_ORIGINS

django-cors-headers renamed the setting for the allowed origins and even
though it still supports the fallback the old setting as a fallback, we
want to be one the safe side.