Revert trustedHost to localhost:8080 by default and fix authorize url