for #838 #827 #832 now the testing auth server doesnt use a port, and the testing corpus server has CORS proxy to be usable in the new chrome store policy