This is the same login the JSON API performs; what differs is that the token is written to a cookie and never shown.
Sign in