move tuakiri authentication from iframe into main window