Static Pages shell. Auth, session cookie, CSRF and D1 member lookup land behind the S5 control-plane gate.
No credential is sent from this static page.