Log in

Email + password, sessions are kept in a secure HTTP-only cookie.