Do the SSO token thing on the background thread.

We're creating a new thread to do the actual launching in the background, this just moves the thread creation up a bit so all the web requests happen on that thread instead of the GUI thread too.

Also changes the CookieContainer to be passed along to each `doWebRequest()` call because it must not be shared between concurrent login attempts.