pull down to refresh

is maybe about security? username and password can be cracked, with email and auth codes is a bit harder.