SSO through direct iframe interaction

First iteration to see if this works. From local tests, it seems to