Add login API route

Set -1 as default client token (means not connected)