P3P header to authentications controller.

IE will refuse to send/receive cookies from inside an iframe unless
there is a P3P header present.  This causes CSRF validation to fail
and session resets, preventing the viewer login from completing.