Encapsulate everything in the iframe

Especially redirects don't redirect the parent page away now