Spec login({window object}), Spec provider.refresh=popup triggering hidden window.open, #123