Fix: Hide auth box by default

Only show the auth box if we're explixitly
unauthorized, rather than hiding it when
we're authorized, so that it doesn't pop
up while we're checking our permissions.