Logs in a user and returns an access token that can be used to authenticate subsequent API requests.
This endpoint does not require authentication. The returned access_token should be stored securely and used in the Authorization header for all other API requests.