AF-37: Expose login locations via REST

Needs to go away. We simply look at commit history to know that.