Login returns and accepts security token in lieu of username+password.