post
https://api.qfp.quantnetwork.net/api/auth/login
Authenticates against the Cognito user pool. Two outcomes:
- Tokens. The platform row is then checked: the user must exist,
have a tenant or the PLATFORM_ADMIN role, and beACTIVE, or
the call is 401. - Challenge.
challengeandsessionare returned and no token
is issued. An invited user getsNEW_PASSWORD_REQUIREDon their
first sign-in; a platform admin never gets a challenge.
Every failure on this path is answered with the same 401
Invalid credentials.

