The mutable reference wappers were causing more problems than they were solving. We will document the dangers of mem::swap later.
The texture payload (skin + cape URL) that we get from the auth server needs to stay intact so the signature is not invalidated. However, skins still aren't loading. Not sure what's up with that.