Protected by Cognito via the Wakulima APIPOST /auth/login