SSO through direct iframe interaction
cleanup and fixes