don't re-add overlay when it's already showing
remove stray event listener when iframe is closed, so credentialForm is not displayed a bunc of times