SSO through direct iframe interaction

First iteration to see if this works. From local tests, it seems to (requires webmaker.org updates, too)