Handle logged-out sessions better.

The events list is updated the immediate next time after authorization
even while the popup is open. The spinning icon stops as it should,
even when the XHR fails.