Update typo in documentation to fix login call.

As the change shows, the codepen object didn't have a 'login' method on it, it was inside codepen.api