support 'hashedToken' or 'token'

Fix issue #13.  Adds Accounts package and if it finds '_hashLoginToken' function it searches for a user based on the 'hashedToken'.  Otherwise just look for the 'token' as before.

Did quick tests with 'shark' branch, release '0.7.01', and '0.6.5.1' which all were able to use fast-render and correctly find the user by cookie.