Draft — this page will cover: each credential kind, the header it uses, and the sign-in and refresh endpoints.