security

MITM could inject JS to steal token.  Always use HTTPS.
additional license information

including licenses for python, requests, pyside, and qt
limit status updates

try to avoid weird progress dialog artifacts on OSX by just reporting
total on complete download
limit logging of basedir

only do it once after parsing arguments