The embed widget returns a 500 after the first page with an ad blocker enabled

Never clears the loading spinner — reproduced on two machines.

Expected: the SSO login keeps its state. Actual: it never clears the loading spinner.