Do Auth0 has a policy for using custom scripts in hosted login page from customer's CDNs?