Login

On success, an HttpOnly auth cookie is set.