Authenticated REST API. Clinicians sign in at POST /login; send Authorization: Bearer <token> on API calls. See /health.
POST /login
Authorization: Bearer <token>
/health