fix: cross-site cookie + auth-status open path for HF iframe 9687f99 matias-cataife commited on May 5