Fix autofocus

Only 1 `autofocus` attribute is allowed per the spec.  Having two
was causing it to randomly choose between the two username fields.
Since we handle this manually in the modal I've removed it there.
On /login we only want it on the login field.
Fix https domain for beta
Allow modal to be closed with esc