DDoS rewrite fixes

apps/web/next.config.js

@@ -141,9 +141,10 @@ const nextConfig = {
         source: "/api/auth/:path*",
         has: [
           {
-            type: "header",
+            type: "query",
-            key: "User-Agent",
+            key: "callbackUrl",
-            value: "node-fetch/1.0 (+https://github.com/bitinn/node-fetch)",
+            // prettier-ignore
+            value: "^(?!https?:\/\/).*$",
           },
         ],
         destination: "/404",