Am i right in answering your question as the first login that takes 50ms - As this will be present in the dmvs because it doesn't disconnect.

So are you suggesting spwhoisactive is not the best way to see what queries could be causing the issue - ie it might miss something when it polls the dmv's ?

I didn't want to run profiler on the server as it was under quite a lot of cpu pressure.