Make autodiscover more lenient

Don't require us to be in <html> and <head>. I don't see any reason why
this could break anything or be a security issue.