fix(auth): fix HTTP/Tailscale login — opt-in HTTPS redirect, CSP nonce propagation 805a069 Nyk commited on Mar 13