Implement login tickets

A new one-time login token mechanism, which replaces the TemporaryAccountRefreshed event and the AccountInfo's SecurityStamp prop.