API_TOKEN from the server's .env, the one the iPhone app uses. This browser then stays signed in for a year.