moved HTTP_REFERER from php to js
- removed PHP for referer
- block loop if it come from "action=showlogin"
Merge pull request #260 from topcoderinc/I-114441-custom-callback-login

I 114441 custom callback login