Add "iframe loader" to dashboard, which will enable server-side apps

[lkostrowski]

Partially implemented here https://github.com/saleor/saleor-dashboard/pull/2550/files

iframe loader should exchange token and use POST to securely send it to the app server.