Fix bikeshed syntax error

The link destination goes after the link text.

This was introduced in #642, but apparently bikeshed has
gotten more strict since then and now produces an error
for this line.

Author: cbiesinger

spec/index.bs

@@ -1574,8 +1574,8 @@ success or failure.
                 with the [=/origin=] of the {{IdentityProviderAPIConfig/login_url}}.
 
                 Note: The IDP login flow may set this value to logged-in using
-                    either the [login-status.html#login-status-javascript](JavaScript) or
-                    [login-status.html#login-status-http](HTTP header) API during the login
+                    either the [JavaScript](login-status.html#login-status-javascript) or
+                    [HTTP header](login-status.html#login-status-http) API during the login
                     flow. It is also possible that this change happened in
                     a different browsing context.
             1. If |loginStatus| is [=logged-in=], return success.