Say which two addresses disagree when better-auth refuses a sign-in with Invalid origin, and warn at startup about a bad app URL (#338)