Move alternate_login JavaScript to its own file, in order to prepare for CSP