This is an API-only service. There is no web UI authentication and all functionality are served over the JSON API and consumed by the mobile and admin clients.