We have auth module: post to /auth/login with username, password and remember_me with a valid login and check /api/users/secret