/login/api persist Authentication to SecurityContextHolder.