Remove unneeded security settings.

This fixes a bug where you could get mini-login screen embedded in forms.
Merge pull request #624 from nla/bug/acm-dsc-581

Remove unneeded security settings.
Merge branch 'master' into js-bugfix