[Gvozd]

заместо

if (pass==users[log]) 
      {top.location.href=password["qwerty"];}

пишем

if (pass==users[log]) 
      {document.getElementsByTagName('iframe')[0].src=password["qwerty"];}