Fix incorrect toast if security setup skipped
DevieListener didn't wait for the user's device list to be downloaded
so it would think the user didn't have cross-signing set up.
Also clear the rest of the state on stop().
Fixes https://github.com/vector-im/riot-web/issues/13372