pull down to refresh

Ah I see, figured there would need to be some privacy trade-offs.
Point #3 will be a nice tailwind once lots of sites are integrated with Mash.