Appearance
Authenticates a user with username, password, and optional TOTP code. Returns a session token on success.
Session token and success message