Add usernameless SSO support to jsconnect.

Client libraries can now pass a user without a username into jsconnect. This requires adding a “signedin” flag to the non-secure js response.