[important] 'liveness' detection: if we get an iframe, it means we're logged in properly