Only allow one validateUser call to be in flight at once.
Properly handle GET requests, and allow for 'http' for testing.
Catch error cases which are certain to have a NotAuthorized status instead of assuming Undetermined.
Better handling of the handleApplicationDidBecomeActive hook.
Deleay delegate call to authenticationStatusChanged by 100th of a second.