pull down to refresh

Here is my thoughts:
  1. The quick way, we can only support lightning login in, after user scan the QRCode, the app send public-key and k1 to server, then get the token.. Similar to this PR: https://github.com/nextauthjs/next-auth/pull/3474/files
  2. In long time, stacker.news implements OAuth like twitter, other apps can register to use api..