Block only on auth. Send the HTML shell the moment it resolves. Stream everything else over the open connection as it arrives. The client reads a stream and renders each section as data arrives. This ...