Bug fix
1. Store __EVENTVALIDATION and pass in partial request.
2. Catch 'SecurityError' on accessing pop-up login page after logout.