fix: set COOP to allow popups for GSI login

The Cross-Origin-Opener-Policy for DJ4 is same-origin by default (wasn't even a thing in DJ3).

This needed changing to allow the Google SignIn popup to be used.

Fix for #39 (closed)