user can log in from web fe

add a login view that uses the login api to get a session token. show
success and error alerts. configure cors in the api server so the
web fe can access it.