At the very least we could reset all data

Only possible if we hold onto the user's password (which we do if they click "save password" on login)

consider automatic reconnect if we can avoid making sessions last perpetually (e.g. using window.onfocus per https://twitter.com/typohhh/status/862763290358951941)