FIX: Bypass serviceworker cache for auth routes (PR #9326)

This avoids samesite cookie-related issues in iOS PWAs during the authentication flow

GitHub

startsWith doesn’t work in old browsers, but I guess it’s not a problem because service workers don’t either!