pull down to refresh

@ek or @sox might have better ideas than I. They’ve been thinking about authentication more recently.