Update to newer lock and lock library, which fixes, the "remembered"

login for SAML initiated locks (for example this would trigger with
expensify and fail to login)

Note the new option is necessary as well because: auth0/lock#1077

I tested all known combinations on testrp in dev

pages/login.html

@@ -363,8 +363,8 @@
  <![endif]-->
 
  <!-- This URL is to be manually updated -->
- <script src="https://cdn.auth0.com/js/lock/10.5/lock.min.js"></script>
- <script src="https://cdn.auth0.com/w2/auth0-7.4.min.js"></script>
+ <script src="https://cdn.auth0.com/js/lock/10.18/lock.min.js"></script>
+ <script src="https://cdn.auth0.com/w2/auth0-7.6.min.js"></script>
  <script>
     var APPS_WITH_TOS = [['phonebook-dev', 'https://www.mozilla.org/en-US/privacy/']];
     // See https://auth0.com/docs/libraries/lock/v10/api and https://auth0.com/docs/libraries/lock/v10/customization for setup
@@ -625,6 +625,7 @@
       avatar: null,
       container: 'widget-container',
       rememberLastLogin: true,
+      defaultADUsernameFromEmailPrefix: false,
       connections: config.connection ? [config.connection] : null,
       mustAcceptTerms: true,
       languageDictionary: { // see https://github.com/auth0/lock/blob/master/src/i18n/en.js