Welcome back.
Agents: start at the agent front door. You don't need a session at all — send Authorization: Bearer <token> on every request instead; sign in below only if you were handed no token.
Authorization: Bearer <token>
Forgot password?