If the client fails to connect to the server, or there's an internal server error then the login prompt is shown. The solution for this should be two-fold. There should be a connectivity check to the server and the response code from /api/validate should be checked more accurately, only showing login if the server says the user is not authorized.
If the client fails to connect to the server, or there's an internal server error then the login prompt is shown. The solution for this should be two-fold. There should be a connectivity check to the server and the response code from /api/validate should be checked more accurately, only showing login if the server says the user is not authorized.