Ask for server URL before showing sign in box

Contact the server's .well-known API before anything to get
available login flows instead of blindly assuming it will be
m.login.password, and to get the server's real URL instead of
requiring users to remember that e.g. it's "chat.privacytools.io"
and not just "privacytools.io" despite user IDs making it look like so.

The server field will also now remember the last accepted URL.

TODO.md

@@ -1,7 +1,11 @@
 # TODO
 
-- Image viewer: 
-    - hflickable: support kinetic scrolling disabler 
+- fallback page
+- SSO page
+- sever list
+- cursor shape in HBox/HTabbedBox pages over fields
+- login with account already added → infinite spinner in room list
+- verify onKeyboardAccept/Cancel things respect button enabled state
 
 - global presence control