Fix optional OAuth configuration access behind private HF proxy

RELEASE_MANIFEST.json

@@ -61,7 +61,7 @@
     "client.js": "7e4bea3b9d2ffa79533ff6abed54481a3a6530e8152093f388e229c621bed9ec",
     "delivery.py": "07453999c3831a16e8b1fcc2b4ae5fb28beb7d3952a3fae8de65d16eb6f11e5b",
     "gpu_tickets.py": "b81aadb5ed42cec9212d44da7e7bbb7b413c5bd517383cac0b49ec9b4d659c92",
-    "hf-auth.js": "866b36d1d5332311a15ab5cc75a5e941c208bd5d2ab3bdb100590dd9a97e7817",
+    "hf-auth.js": "3f3938bbc0935e4e9230c094029ef46e03beea74be199887c50e053e03dafcfe",
     "hf_identity.py": "913fb1e089af21f376e8359a20cbc838d5bcd7971def6989a4382d53c1127b37",
     "index.html": "a145fbb303a85c728a530d98fbea998677c1c62a2589c46af9b8b287e4ce1f48",
     "portable_bundle.py": "dec236bf875a431b650e04715e2677344203ec2f1eedc63493caee97f338d50f",

hf-auth.js

@@ -103,7 +103,7 @@
   const returned=location.href,params=new URL(returned).searchParams;
   const isCallback=params.has('code')||params.has('error');
   if(isCallback){history.replaceState(null,'','/');exchanging=true;}
-  fetch('/api/auth/config',{cache:'no-store',credentials:'omit'}).then(async response=>{
+  fetch('/api/auth/config',{cache:'no-store',credentials:'same-origin'}).then(async response=>{
     if(!response.ok)throw Error();config=await response.json();ready=config.enabled===true;
     if(isCallback){
       let flow;