fix(openapi): send spec with `.json()`, use cookie auth

[LoneRifle]

• Correct OpenAPI spec to state the use of cookies for auth
• Use json(), not send(), to ensure spec is only sent as JSON

[vercel[bot]]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
starter-kit	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Oct 10, 2023 7:56am