Authenticates a user with a username and password and then returns a token for use in subsequent API calls. This request also sets a session cookie.
Include the returned access token in the Authorization header for subsequent requests in the format:
Authorization: Bearer {token}