Bug 1000323 - Force reauthentication when disabling Find My Device.

Your first paragraph is correct; very sorry to get this wrong! Regarding the second, that's FMD's business but note that you should not call refreshAuthentication when the user is not logged in. I should test that to see what happens, in fact.