TUS misuse of OCIS_CORS_ALLOW_ORIGINS ?

## Describe the bug
If you don't have the OCIS_URL in OCIS_CORS_ALLOW_ORIGINS, uploads bigger than the TUS chunk threshold (10MB) fail.

They fail because the storage-users service aborts the PATCH request of the first chunk with HTTP 403.

CORS is checked on the browser side and not the server side, so I expect a misusage of the CORS configuration here...

## Additional context

See also:
- https://github.com/owncloud/ocis-charts/pull/744
- https://github.com/owncloud/ocis-charts/issues/643