Replace image-based AutoLogin with iframes

The image-based Special:AutoLogin is not secure. Change to an
iframe-based method (using the same code as the js login check) instead.

Change-Id: Id47efec74e2d625bf0d3761ed53e3b6ab6f74c2c