Member Login.

Credentials are verified server-side. Session tokens remain in HttpOnly cookies only.