Add a page for login form and a page logout. Use basic http auth at first. If it doesn't work something else, like JWT, is needed (requires modification to the backend as well).