Switch to server-side door open rather than client sending unlock, sleep, lock.
Allow the user to cancel the login process.