fix(signin): pass account data to broker instead of using currentUser

@shane-tomlinson feedback appreciated!
The only field used from `accountData` is `sessionToken` - does it make sense to only pass that in?

Another suggestion is to throw an error if `sessionToken` is missing, we cannot generate an assertion without it anyways IIUC.