Draft — this page will cover: sign-in, token lifetime, refresh, agent credentials, and the cross-origin limitation.