Decouple menusheet from account

This fixes #117 and fixes #59.

(There's still a bit more work to fully conform to the #1's specification that share rooms remembered while not being logged in are also visible while being logged in.)