Adding a blog to the app, in which your user role is "Contributor", will show you a Username/password prompt just after the login.

I think the refresh blog task doesn't get the 401 error well, and fire/broadcast a wrong event. In this case username or password wrong.