Implement account verification (PIN code)
Use TalkService.do path for login instead of auth token kludge
Handle more exceptions (e.g. logout via mobile app)