Not signed in.
API: POST /login · GET /api/user/{id} (own record only).
POST /login
GET /api/user/{id}