when detecting a login form, explicitly check the action URL

Fixes a bug where helpscout was redirecting to a registration page, since there was a hidden page on helpscout.com