Sign in to cortex

Point the app at a cortex instance and sign in. Your password is spent once, here on this app's own server; what it keeps is the session cortex issues, in a cookie the browser cannot read — and this server is what presents it to cortex, so the page never holds a credential of any kind.