Sign in

Credentials are never stored or checked against anything real. demo / demo returns 200 and sets a session cookie; everything else returns 401.