Release v2.37.1

Changed

• The authentication documentation now explains the 502 upstream sent too big header failure behind ingress-nginx and recommends proxy-buffer-size: "16k". (part of #225)

Fixed

• OAuth providers no longer store the provider's access and refresh tokens in the session cookie, matching OIDC providers. The smaller cookie keeps the sign-in callback's response headers further below an ingress header buffer limit. (part of #225)