fix(client): autofocus the password field on /oauth/signin if the user already has a session.

fixes #1679