Log in a user via the API

This is tricky to do – the API alone cannot do it, because you need to set a cookie.

I’d try embedding the login-route in an invisible iframe once after the user logs in – but that’s an ugly hack.