OF-983 appears to be caused by a complex bouncing process run while the
authentication check lock is held. This patch moves the actual bounce to
outside the synchronized block, so the code no longer deadlocks.

Untested, but based on the stack traces in OF-983 reports.