Set up access_token handling

[hellcp]

When there's an access_token in the cookie or a query parameter, the site should display information about that user's installed apps (and allow them to install apps), hearts and other such information.