On the next screen, Google will call *.supabase.co. This is expected — Supabase is our secure backend provider that safely handles login.