hack(login): circumvent login first bug by forcing page refresh
fix(items-manipulation): server authorises for now, closes #145