fix: set access-control-allow-credentials=true in auth.pl  (#7022)
fix: set access-control-allow-credentials=true in auth.pl  (#7022)

* fix access-control-allow-origin header
* allow only our subdomains
* Origin header does not contain the path

Co-authored-by: off <da7a68734367828e30b94927f4c2b43ed2c0f652@openfoodfacts.org>
openfoodfacts/openfoodfacts-server,openfoodfacts/openfoodfacts-server,openfoodfacts/openfoodfacts-server,openfoodfacts/openfoodfacts-server,openfoodfacts/openfoodfacts-server