Ok, I tried to change it to Pull-Push replication - and now it doesn’t crash anymore!!! So you’re definitely on the track of something.
I cannot test with a logged in user as the login via a service call to my server fails when trying to lookup the user id based on the email address.
Same error as I have described here: Strange issue: Could not decode snappy-compressed value…