loginCancelled added to authService (abandons or rejects all the requests and broadcasts event:auth-loginCancelled)
minor cleanup: iterating over array using `for x in y`