Fix csrf allowedOrigins
Fix csrf allowedOrigins

Added "file://" to the csrf allowedOrigins to allow devices to log in.

PointSource/checkit-blueoak,PointSource/checkit-blueoak,PointSource/checkit-blueoak