pull down to refresh

I guess it's the good ol' convenience-security tradeoff