More resilient login form detection (works with absolute URLs and GET params)