Error returning to RP app from IDP in Chrome

[Brendan Sudol]

Console error is Refused to send form data to 'http://localhost:4567/consume' because it violates the following Content Security Policy directive: "form-action 'self'".

To get it working, I think we need to add to domain whitelist here.

The process works in Firefox because because Firefox doesn’t implement CSP properly 😜