Integrate with browser password manager

[davidben]

We're all AJAX-y and the browser's heuristics for login forms don't work here. Investigate how all their password managers work and see if we can fake it (navigate invisible iframes? about:blank?) without actually sending a password out.