Use the new all-in-one web/authenticate endpoint
Update README to match new options
Merge pull request #21 from toopher/feature/default-to-all-in-one-iframe

Use the new all-in-one `web/authenticate` endpoint