Story f1 can generate an authentication token via the api

A user (generally in the form of an application or script) makes a call to the api to generate an authentication token. As long as the provided credentials in the request are valid an authentication token is given in the response. The authentication token acts very much like a session id for subsequent requests to prevent the need for continually passing a secure password in transactions.