Refresh-proof sign-in.