Explicitly request storage access

I'm fairly sure our Passport.js-based auth method also used cookies, so I'm not sure why that did work, but it looks like our requests from within an iframe aren't sending cookies. There's a suggestion here to use the Storage Access API, which I'm not sure if it'll be sufficient, but is worth trying: https://github.com/nextauthjs/next-auth/issues/1151