handle Web Channel Login
Stores the session token from a WebChannel login JSON payload without exposing it to the browser layer.
The json_payload is the data object from the fxaccounts:login WebChannel command. The session token is extracted and stored internally; callers never hold the raw token value.
💾 This method alters the persisted account state.