Preserve `this` for login handlers when run from a method.

Also rename `Accounts.createToken` to `Accounts._runLoginHandlers`. For
consistency we should probably also have `Accounts.destroyToken` be
something like `Accounts._destroyLoginToken`, but I'm not going to
change that now because it's already shipped.