enable adding JS code to signin page
process assertions even if a valid cookie is present
fire watch() from window.onload() to allow for some preparation
show error if authorization failed (403 Forbidden)
Merge pull request #20 from mozilla/dynamic-page

show error page and allow relogin after failed authorization (fixes #13)