MDL-34656 prevent login form from being shown inside iframe - also prevent wantsurl...