scan the user's website for an authorization_endpoint rel and show those in the list of supported providers too. actually verifies the endpoint by checking if it returns an IndieAuth header. adds the IndieAuth response header.
force parsing pages as html if no content type is returned. surface a better error if an invalid content type is returned