... now in authentication hell ...

well, study the source code ... all that on stuff only happens in ->new

it doesn't happen anywhere place else

you should not duplicate that , refresh_messages, neither does any other method

Did I mention I hate SOAP?