cms-auth broker. Begin the CMS login at /auth.