854ccd1344
LocalhostAuthEnabled=false set in all three qbt configs. portforward-helper and coordinator now call the API directly without auth — no more ban risk from failed login attempts.