auth: restrict default CORS origins to loopback #564

Job	Run time
checks / pre-commit	33s
checks / readme-snippets	10s
checks / test (3.11, lowest-direct, windows-latest)	2m 40s
checks / test (3.10, locked, ubuntu-latest)	51s
checks / test (3.10, locked, windows-latest)	2m 24s
checks / test (3.10, lowest-direct, ubuntu-latest)	55s
checks / test (3.11, lowest-direct, ubuntu-latest)	51s
checks / test (3.11, locked, ubuntu-latest)	48s
checks / test (3.12, lowest-direct, ubuntu-latest)	1m 1s
checks / test (3.10, lowest-direct, windows-latest)	3m 8s
checks / test (3.12, locked, windows-latest)	3m 17s
checks / test (3.11, locked, windows-latest)	2m 28s
checks / test (3.12, lowest-direct, windows-latest)	3m 50s
checks / test (3.14, lowest-direct, windows-latest)	2m 33s
checks / test (3.13, lowest-direct, windows-latest)	2m 41s
checks / test (3.12, locked, ubuntu-latest)	52s
checks / test (3.13, locked, ubuntu-latest)	44s
checks / test (3.13, locked, windows-latest)	2m 17s
checks / test (3.14, locked, ubuntu-latest)	2m 13s
checks / test (3.14, locked, windows-latest)	3m 36s
checks / test (3.14, lowest-direct, ubuntu-latest)	1m 10s
checks / test (3.13, lowest-direct, ubuntu-latest)	53s
all-green	4s
	39m 59s

Provide feedback