OPDS on + an OPDS user: 200 200
before: web sign-in -> 200 | OPDS feed (olvaso) -> 200
a stranger's 6 wrong web sign-ins -> ['401', '401', '401', '401', '401', '429']
during the lock: web sign-in (right) -> 429 | OPDS feed (right) -> 200 | OPDS wrong -> 401
the 15-minute expiry itself was measured earlier (throttle.txt); not waited out again here
