> This looks like it will try to log the user in again but without any of the callbacks.

Yes, that's a good catch! This needs re-jigging. Plus all the timeouts need testing at some point (future branch).