The server needs a `login` resource which supports the following:

• `/rest/v2/login?action=login` which triggers 401 handling and browser authentication
• `/rest/v2/login?action=config` which returns a JSON object containing authentication configuration so that the welcome page can have logic to redirect to an OAuth portal