I deployed my same code in glitch and it appears to work - I’m guessing the problem is with me using nginx.
Looks like someone else ran into this issue:
Is there any reason why it would not authenticate through nginx?