return accessible annotations for document's remote_data, even if account is not logged in

This will aid in syncing the viewer's state once an account logs out
Logout via viewer.

The RPC communication is simplified by replacing the setLoginSuccess
and setLoginFailure views/JS calls with setLoginStatus.  This single call will
relay whatever data the account has across the XDM RPC interface to
and the viewer will update accordingly.
Merge remote-tracking branch 'nathan/memberships' into public_notes
Viewer fixes