hvn-desktop-auth GET /sso/authorize?redirect_uri&state&code_challenge (behind Cloudflare Access) POST /token {code, code_verifier} GET /sso/whoami (behind Cloudflare Access) GET /health