Cross-Origin-Opener-Policy policy would block the window.closed call

Another day, another important issue left unnoticed by the Auth0 team :melting_face: