chore: remove unused OAuth helper endpoint and add host validation middleware (#789)