reconfigured login flow, removed block on iframes, fixed URLconfs