pub async fn login( dir: &Path, url: &str, token: String, ) -> Result<(Value, PathBuf)>
Verify the credential against the bus and, only then, persist it. Returns the scope the server reported.