add reference to toopher-web.js location
some updates from PR feedback
Prefer iframe over IFRAME in docs and comments
Rename sessionToken to requestToken