I think Steam validation should be done first and foremost. Then after that's done the player should then be handed over with a session ID to the login/character server. Would isolate a lot of issues I think and prevent hammering of the login server which needs to handle a lot of things like the...