Use stderr instead of stdout in login command.

This is consistent with old password prompts (see #1600), and also makes
it so that everyone who calls `doInteractivePasswordLogin` is using the
same stream as `doInteractivePasswordLogin`.
Ask accounts server for a username if we don't know of one yet