if you make the server auth endpoint just hang, then the client doesn't open the main window.
the client hangs for 30s, and then the call times out & it continues correctly in remote mode.

the call should not block opening the window.

remaining from #325