Session lasts 12 hours. API callers: POST JSON {"username","password"} to /login for a Bearer token.
{"username","password"}
/login