diff --git a/.gitmodules b/.gitmodules
index 88198314dd0..3386d5068ca 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -18,6 +18,10 @@
 	path = third-party/inputtino
 	url = https://github.com/games-on-whales/inputtino.git
 	branch = stable
+[submodule "third-party/jwt-cpp"]
+	path = third-party/jwt-cpp
+	url = https://github.com/Thalhammer/jwt-cpp.git
+	branch = master
 [submodule "third-party/moonlight-common-c"]
 	path = third-party/moonlight-common-c
 	url = https://github.com/moonlight-stream/moonlight-common-c.git
diff --git a/cmake/compile_definitions/common.cmake b/cmake/compile_definitions/common.cmake
index a2260595c9a..fa03e984009 100644
--- a/cmake/compile_definitions/common.cmake
+++ b/cmake/compile_definitions/common.cmake
@@ -132,6 +132,7 @@ include_directories(
         "${CMAKE_SOURCE_DIR}/third-party/moonlight-common-c/enet/include"
         "${CMAKE_SOURCE_DIR}/third-party/nanors"
         "${CMAKE_SOURCE_DIR}/third-party/nanors/deps/obl"
+        "${CMAKE_SOURCE_DIR}/third-party/jwt-cpp/include"
         ${FFMPEG_INCLUDE_DIRS}
         ${Boost_INCLUDE_DIRS}  # has to be the last, or we get runtime error on macOS ffmpeg encoder
 )
diff --git a/src/confighttp.cpp b/src/confighttp.cpp
index 6d80220612c..cfa6045592a 100644
--- a/src/confighttp.cpp
+++ b/src/confighttp.cpp
@@ -24,6 +24,7 @@
 #include <Simple-Web-Server/crypto.hpp>
 #include <Simple-Web-Server/server_https.hpp>
 #include <boost/asio/ssl/context_base.hpp>
+#include <jwt-cpp/jwt.h>
 
 #include "config.h"
 #include "confighttp.h"
@@ -46,6 +47,8 @@ namespace confighttp {
   namespace fs = std::filesystem;
   namespace pt = boost::property_tree;
 
+  std::string jwt_key;
+
   using https_server_t = SimpleWeb::Server<SimpleWeb::HTTPS>;
 
   using args_t = SimpleWeb::CaseInsensitiveMultimap;
@@ -63,7 +66,7 @@ namespace confighttp {
     BOOST_LOG(debug) << "DESTINATION :: "sv << request->path;
 
     for (auto &[name, val] : request->header) {
-      BOOST_LOG(debug) << name << " -- " << (name == "Authorization" ? "CREDENTIALS REDACTED" : val);
+      BOOST_LOG(debug) << name << " -- " << (name == "Cookie" || name == "Authorization" ? "SENSIBLE HEADER REDACTED" : val);
     }
 
     BOOST_LOG(debug) << " [--] "sv;
@@ -79,9 +82,7 @@ namespace confighttp {
   send_unauthorized(resp_https_t response, req_https_t request) {
     auto address = net::addr_to_normalized_string(request->remote_endpoint().address());
     BOOST_LOG(info) << "Web UI: ["sv << address << "] -- not authorized"sv;
-    const SimpleWeb::CaseInsensitiveMultimap headers {
-      { "WWW-Authenticate", R"(Basic realm="Sunshine Gamestream Host", charset="UTF-8")" }
-    };
+    const SimpleWeb::CaseInsensitiveMultimap headers {};
     response->write(SimpleWeb::StatusCode::client_error_unauthorized, headers);
   }
 
@@ -113,29 +114,46 @@ namespace confighttp {
     }
 
     auto fg = util::fail_guard([&]() {
-      send_unauthorized(response, request);
+      BOOST_LOG(info) << request->path;
+      std::string apiPrefix = "/api";
+      if (request->path.compare(0, apiPrefix.length(), apiPrefix) == 0) {
+        send_unauthorized(response, request);
+      }
+      // Redirect to login, but only once
+      else if (!request->path.starts_with("/login")) {
+        send_redirect(response, request, ("/login?redirect=" + request->path).c_str());
+      }
     });
 
-    auto auth = request->header.find("authorization");
+    auto auth = request->header.find("cookie");
     if (auth == request->header.end()) {
       return false;
     }
 
     auto &rawAuth = auth->second;
-    auto authData = SimpleWeb::Crypto::Base64::decode(rawAuth.substr("Basic "sv.length()));
-
-    int index = authData.find(':');
-    if (index >= authData.size() - 1) {
-      return false;
+    std::istringstream iss(rawAuth);
+    std::string token, cookie_name = "sunshine_session=", cookie_value = "";
+
+    while (std::getline(iss, token, ';')) {
+      // Left Trim Cookie
+      token.erase(token.begin(), std::find_if(token.begin(), token.end(), [](unsigned char ch) {
+        return !std::isspace(ch);
+      }));
+      // Compare that the cookie name is sunshine_session
+      if (token.compare(0, cookie_name.length(), cookie_name) == 0) {
+        cookie_value = token.substr(cookie_name.length());
+        break;
+      }
     }
 
-    auto username = authData.substr(0, index);
-    auto password = authData.substr(index + 1);
-    auto hash = util::hex(crypto::hash(password + config::sunshine.salt)).to_string();
+    if (cookie_value.length() == 0) return false;
+    auto decoded = jwt::decode(cookie_value);
+    auto verifier = jwt::verify()
+                      .with_issuer("sunshine-" + http::unique_id)
+                      .with_claim("sub", jwt::claim(std::string(config::sunshine.username)))
+                      .allow_algorithm(jwt::algorithm::hs256 { jwt_key });
 
-    if (!boost::iequals(username, config::sunshine.username) || hash != config::sunshine.password) {
-      return false;
-    }
+    verifier.verify(decoded);
 
     fg.disable();
     return true;
@@ -182,6 +200,16 @@ namespace confighttp {
     response->write(content, headers);
   }
 
+  void
+  getLoginPage(resp_https_t response, req_https_t request) {
+    print_req(request);
+
+    std::string content = file_handler::read_file(WEB_DIR "login.html");
+    SimpleWeb::CaseInsensitiveMultimap headers;
+    headers.emplace("Content-Type", "text/html; charset=utf-8");
+    response->write(content, headers);
+  }
+
   void
   getAppsPage(resp_https_t response, req_https_t request) {
     if (!authenticate(response, request)) return;
@@ -658,6 +686,8 @@ namespace confighttp {
           else {
             http::save_user_creds(config::sunshine.credentials_file, newUsername, newPassword);
             http::reload_user_creds(config::sunshine.credentials_file);
+            // Regen the JWT Key to invalidate sessions
+            jwt_key = crypto::rand_alphabet(64);
             outputTree.put("status", true);
           }
         }
@@ -796,16 +826,112 @@ namespace confighttp {
     outputTree.put("status", true);
   }
 
+  void
+  login(resp_https_t response, req_https_t request) {
+    auto address = net::addr_to_normalized_string(request->remote_endpoint().address());
+    auto ip_type = net::from_address(address);
+
+    if (ip_type > http::origin_web_ui_allowed) {
+      BOOST_LOG(info) << "Web UI: ["sv << address << "] -- denied"sv;
+      response->write(SimpleWeb::StatusCode::client_error_forbidden);
+      return;
+    }
+
+    std::stringstream ss;
+    ss << request->content.rdbuf();
+
+    pt::ptree inputTree, outputTree;
+    auto g = util::fail_guard([&]() {
+      std::ostringstream data;
+
+      pt::write_json(data, outputTree);
+      response->write(data.str());
+    });
+
+    try {
+      // TODO: Input Validation
+      pt::read_json(ss, inputTree);
+      auto username = inputTree.get<std::string>("username");
+      auto password = inputTree.get<std::string>("password");
+      auto hash = util::hex(crypto::hash(password + config::sunshine.salt)).to_string();
+
+      if (!boost::iequals(username, config::sunshine.username) || hash != config::sunshine.password) {
+        outputTree.put("status", "false");
+        return;
+      }
+      outputTree.put("status", "true");
+      auto token = jwt::create().set_type("JWT").set_issued_at(std::chrono::system_clock::now()).set_expires_at(std::chrono::system_clock::now() + std::chrono::seconds { 3600 }).set_issuer("sunshine-" + http::unique_id).set_payload_claim("sub", jwt::claim(std::string(config::sunshine.username))).sign(jwt::algorithm::hs256 { jwt_key });
+      std::stringstream cookie_stream;
+      cookie_stream << "sunshine_session=";
+      cookie_stream << token;
+      cookie_stream << "; Secure; HttpOnly; SameSite=Strict; Path=/";
+      const SimpleWeb::CaseInsensitiveMultimap headers {
+        { "Set-Cookie", cookie_stream.str() }
+      };
+      std::ostringstream data;
+      pt::write_json(data, outputTree);
+      response->write(SimpleWeb::StatusCode::success_ok, data.str(), headers);
+      g.disable();
+      return;
+    }
+    catch (std::exception &e) {
+      BOOST_LOG(warning) << "SaveApp: "sv << e.what();
+
+      outputTree.put("status", "false");
+      outputTree.put("error", "Invalid Input JSON");
+      return;
+    }
+
+    outputTree.put("status", "true");
+  }
+
+  void
+  logout(resp_https_t response, req_https_t request) {
+    pt::ptree outputTree;
+    try {
+      if (!authenticate(response, request)) return;
+
+      print_req(request);
+
+      auto g = util::fail_guard([&]() {
+        std::ostringstream data;
+        pt::write_json(data, outputTree);
+        response->write(data.str());
+      });
+
+      const SimpleWeb::CaseInsensitiveMultimap headers {
+        { "Set-Cookie", "sunshine_session=redacted; expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure; HttpOnly; SameSite=Strict; Path=/" }
+      };
+      std::ostringstream data;
+      outputTree.put("status", true);
+      pt::write_json(data, outputTree);
+
+      response->write(SimpleWeb::StatusCode::success_ok, data.str(), headers);
+      g.disable();
+    }
+    catch (std::exception &e) {
+      BOOST_LOG(warning) << "SaveApp: "sv << e.what();
+
+      outputTree.put("status", "false");
+      outputTree.put("error", "Invalid Input JSON");
+      return;
+    }
+  }
+
   void
   start() {
     auto shutdown_event = mail::man->event<bool>(mail::shutdown);
 
+    // On each server start, create a randomized jwt_key
+    jwt_key = crypto::rand_alphabet(64);
+
     auto port_https = net::map_port(PORT_HTTPS);
     auto address_family = net::af_from_enum_string(config::sunshine.address_family);
 
     https_server_t server { config::nvhttp.cert, config::nvhttp.pkey };
     server.default_resource["GET"] = not_found;
     server.resource["^/$"]["GET"] = getIndexPage;
+    server.resource["^/login/?$"]["GET"] = getLoginPage;
     server.resource["^/pin/?$"]["GET"] = getPinPage;
     server.resource["^/apps/?$"]["GET"] = getAppsPage;
     server.resource["^/clients/?$"]["GET"] = getClientsPage;
@@ -828,6 +954,8 @@ namespace confighttp {
     server.resource["^/api/clients/unpair$"]["POST"] = unpair;
     server.resource["^/api/apps/close$"]["POST"] = closeApp;
     server.resource["^/api/covers/upload$"]["POST"] = uploadCover;
+    server.resource["^/api/logout$"]["POST"] = logout;
+    server.resource["^/api/login$"]["POST"] = login;
     server.resource["^/images/sunshine.ico$"]["GET"] = getFaviconImage;
     server.resource["^/images/logo-sunshine-45.png$"]["GET"] = getSunshineLogoImage;
     server.resource["^/assets\\/.+$"]["GET"] = getNodeModules;
diff --git a/src_assets/common/assets/web/LoginForm.vue b/src_assets/common/assets/web/LoginForm.vue
new file mode 100644
index 00000000000..4463667ddf5
--- /dev/null
+++ b/src_assets/common/assets/web/LoginForm.vue
@@ -0,0 +1,73 @@
+<template>
+  <form id="login-form" @submit.prevent="save" method="post" autocomplete="on">
+    <div class="mb-2">
+      <label for="usernameInput" class="form-label">Username:</label>
+      <input type="text" class="form-control" id="usernameInput" autocomplete="username" name="username"
+        v-model="passwordData.username" autofocus/>
+    </div>
+    <div class="mb-2">
+      <label for="passwordInput" class="form-label">Password:</label>
+      <input type="password" class="form-control" id="passwordInput" autocomplete="current-password" name="current-password"
+        v-model="passwordData.password" required />
+    </div>
+    <input type="submit" class="btn btn-primary w-100 mb-2" v-bind:disabled="loading" value="Login"/>
+    <div class="alert alert-danger" v-if="error"><b>Error: </b>{{ error }}</div>
+    <div class="alert alert-success" v-if="success">
+      <b>Success! </b>
+    </div>
+  </form>
+</template>
+
+<script>
+export default {
+  data() {
+    return {
+      error: null,
+      success: false,
+      loading: false,
+      passwordData: {
+        username: "",
+        password: ""
+      },
+    };
+  },
+  methods: {
+    save() {
+      this.error = null;
+      this.loading = true;
+      fetch("/api/login", {
+        method: "POST",
+        body: JSON.stringify(this.passwordData),
+      }).then((r) => {
+        this.loading = false;
+        if (r.status === 200) {
+          r.json().then((rj) => {
+            if (rj.status.toString() === "true") {
+              this.success = true;
+              const emitter = this.$emit;
+
+              if (window.PasswordCredential) {
+                const c = new PasswordCredential(
+                    document.getElementById("login-form")
+                );
+
+                navigator.credentials.store(c).then((a) => {
+                  emitter('loggedin');
+                }).catch((err) => {
+                  emitter('loggedin');
+                });
+              } else {
+                emitter('loggedin');
+              }
+            } else {
+              this.error = rj.error || "Invalid Username or Password";
+            }
+          });
+        } else {
+          this.error = "Internal Server Error";
+        }
+      });
+    },
+  },
+}
+</script>
diff --git a/src_assets/common/assets/web/Navbar.vue b/src_assets/common/assets/web/Navbar.vue
index 838c630f45a..7867c8db6c2 100644
--- a/src_assets/common/assets/web/Navbar.vue
+++ b/src_assets/common/assets/web/Navbar.vue
@@ -22,7 +22,7 @@
           <li class="nav-item">
             <a class="nav-link" href="/config"><i class="fas fa-fw fa-cog"></i> {{ $t('navbar.configuration') }}</a>
           </li>
-          <li class="nav-item">
+          <li class="nav-item" v-if="isLoggedIn">
             <a class="nav-link" href="/password"><i class="fas fa-fw fa-user-shield"></i> {{ $t('navbar.password') }}</a>
           </li>
           <li class="nav-item">
@@ -32,25 +32,82 @@
             <ThemeToggle/>
           </li>
         </ul>
+        <ul  class="navbar-nav mb-2 mb-lg-0" v-if="isLoggedIn">
+          <li class="nav-item">
+            <a class="nav-link" href="#" @click="logout"><i class="fas fa-fw fa-right-from-bracket"></i> Logout</a>
+          </li>
+        </ul>
       </div>
     </div>
   </nav>
+    <!-- Modal that is shown when the user gets a 401 error -->
+    <div class="modal fade" id="loginModal" tabindex="-1" v-if="isLoggedIn">
+        <div class="modal-dialog">
+            <div class="modal-content">
+                <div class="modal-header">
+                    <h1 class="modal-title fs-5" id="exampleModalLabel">Session Expired</h1>
+                </div>
+                <div class="modal-body">
+                    <LoginForm @loggedin="onLogin" />
+                </div>
+            </div>
+        </div>
+    </div>
 </template>
 
 <script>
 import ThemeToggle from './ThemeToggle.vue'
+import { Modal } from 'bootstrap/dist/js/bootstrap'
+import LoginForm from './LoginForm.vue'
 
 export default {
-  components: { ThemeToggle },
+  components: {
+    ThemeToggle,
+    LoginForm
+  },
+  props: {
+    isLoggedIn: {
+      type: Boolean,
+      default: true
+    }
+  },
+  data() {
+    modal: null
+  },
   created() {
     console.log("Header mounted!")
   },
   mounted() {
-    let el = document.querySelector("a[href='" + document.location.pathname + "']");
-    if (el) el.classList.add("active")
-    let discordWidget = document.createElement('script')
-    discordWidget.setAttribute('src', 'https://app.lizardbyte.dev/js/discord.js')
-    document.head.appendChild(discordWidget)
+    if (!this.isLoggedIn) {
+      return
+    }
+    this.setupDiscordWidget()
+
+    this.setupUserSession()
+  },
+  methods: {
+    setupUserSession() {
+      // TODO: Migrate this to a Pinia state?
+      window.addEventListener("sunshine:session_expire", () => {
+        this.modal.toggle();
+      })
+      this.modal = new Modal(document.getElementById('loginModal'), {});
+    },
+    setupDiscordWidget() {
+      let el = document.querySelector("a[href='" + document.location.pathname + "']");
+      if (el) el.classList.add("active")
+      let discordWidget = document.createElement('script')
+      discordWidget.setAttribute('src', 'https://app.lizardbyte.dev/js/discord.js')
+      document.head.appendChild(discordWidget)
+    },
+    onLogin() {
+      this.modal.toggle();
+    },
+    logout() {
+      fetch("/api/logout", { method: "POST" }).then(r => {
+        document.location.href = '/';
+      })
+    }
   }
 }
 </script>
diff --git a/src_assets/common/assets/web/apps.html b/src_assets/common/assets/web/apps.html
index 9a8c65d16ae..f4bdc3dfa7e 100644
--- a/src_assets/common/assets/web/apps.html
+++ b/src_assets/common/assets/web/apps.html
@@ -359,6 +359,7 @@ <h4>{{ $t('apps.env_vars_about') }}</h4>
   import { initApp } from './init'
   import Navbar from './Navbar.vue'
   import { Dropdown } from 'bootstrap/dist/js/bootstrap'
+  import fetch from './fetch.js'
 
   const app = createApp({
     components: {
diff --git a/src_assets/common/assets/web/config.html b/src_assets/common/assets/web/config.html
index 8386dbd3673..14d9f059e4c 100644
--- a/src_assets/common/assets/web/config.html
+++ b/src_assets/common/assets/web/config.html
@@ -107,6 +107,7 @@ <h1 class="my-4">{{ $t('config.configuration') }}</h1>
   import AudioVideo from './configs/tabs/AudioVideo.vue'
   import ContainerEncoders from './configs/tabs/ContainerEncoders.vue'
   import {$tp, usePlatformI18n} from './platform-i18n'
+  import fetch from './fetch.js'
 
   const app = createApp({
     components: {
diff --git a/src_assets/common/assets/web/fetch.js b/src_assets/common/assets/web/fetch.js
new file mode 100644
index 00000000000..fbc2a92a49f
--- /dev/null
+++ b/src_assets/common/assets/web/fetch.js
@@ -0,0 +1,9 @@
+export default async (url, config) => {
+    const response = await fetch(url, config);
+    // console.log(response);
+    if (response.status === 401) {
+        const event = new Event("sunshine:session_expire");
+        window.dispatchEvent(event);
+    }
+    return response;
+};
diff --git a/src_assets/common/assets/web/index.html b/src_assets/common/assets/web/index.html
index 9eccf9e1eca..ce53949f4c2 100644
--- a/src_assets/common/assets/web/index.html
+++ b/src_assets/common/assets/web/index.html
@@ -79,6 +79,7 @@ <h3>{{githubVersion.release.name}}</h3>
   import Navbar from './Navbar.vue'
   import ResourceCard from './ResourceCard.vue'
   import SunshineVersion from './sunshine_version'
+  import fetch from './fetch.js'
 
   console.log("Hello, Sunshine!")
   let app = createApp({
diff --git a/src_assets/common/assets/web/login.html b/src_assets/common/assets/web/login.html
new file mode 100644
index 00000000000..d5701520549
--- /dev/null
+++ b/src_assets/common/assets/web/login.html
@@ -0,0 +1,70 @@
+<!DOCTYPE html>
+<html lang="en" data-bs-theme="auto">
+
+<head>
+  <%- header %>
+</head>
+
+<body id="app">
+  <navbar :is-logged-in="false"></navbar>
+  <main role="main" style="max-width: 1200px; margin: 1em auto">
+    <div class="d-flex justify-content-center gap-4">
+      <div class="p-4 card">
+        <header>
+          <h1 class="mb-2">
+            <img src="/images/logo-sunshine-45.png" height="45" alt="" style="vertical-align: bottom;">
+            Hello, Sunshine!
+          </h1>
+        </header>
+        <login-form @loggedin="onLogin"></login-form>
+      </div>
+      <div>
+        <resource-card></resource-card>
+      </div>
+    </div>
+  </main>
+</body>
+
+<script type="module">
+  import { createApp } from 'vue'
+  import ResourceCard from './ResourceCard.vue'
+  import LoginForm from './LoginForm.vue'
+  import Navbar from './Navbar.vue'
+  import { initApp } from './init'
+
+  let app = createApp({
+    components: {
+      ResourceCard,
+      LoginForm,
+      Navbar
+    },
+    methods: {
+      onLogin() {
+          const searchParams = new URLSearchParams(window.location.search);
+          let newPath = '/';
+          if (searchParams.has('redirect')) {
+              const redirect = searchParams.get('redirect');
+              const encodePath = (path) => {
+                  return path.split('').map(char => {
+                      if (char === '/') return char; // Keep '/' unencoded
+                      return encodeURIComponent(char);
+                  }).join('');
+              };
+
+              try {
+                  const redirectUrl = new URL(redirect);
+                  newPath = redirectUrl.pathname;
+              } catch (error) {
+                  if (redirect.startsWith('/')) {
+                      newPath = encodePath(redirect);
+                  }
+              }
+          }
+
+          document.location.href = newPath;
+      }
+    }
+  });
+
+  initApp(app);
+</script>
diff --git a/src_assets/common/assets/web/password.html b/src_assets/common/assets/web/password.html
index 639c82b7401..90dd6b766b6 100644
--- a/src_assets/common/assets/web/password.html
+++ b/src_assets/common/assets/web/password.html
@@ -69,6 +69,7 @@ <h4>{{ $t('password.new_creds') }}</h4>
   import { createApp } from 'vue'
   import { initApp } from './init'
   import Navbar from './Navbar.vue'
+  import fetch from './fetch.js'
 
   const app = createApp({
     components: {
diff --git a/src_assets/common/assets/web/pin.html b/src_assets/common/assets/web/pin.html
index d8ce1da5496..f06a6b67323 100644
--- a/src_assets/common/assets/web/pin.html
+++ b/src_assets/common/assets/web/pin.html
@@ -27,6 +27,7 @@ <h1 class="my-4 text-center">{{ $t('pin.pin_pairing') }}</h1>
   import { createApp } from 'vue'
   import { initApp } from './init'
   import Navbar from './Navbar.vue'
+  import fetch from './fetch.js'
 
   let app = createApp({
     components: {
diff --git a/src_assets/common/assets/web/troubleshooting.html b/src_assets/common/assets/web/troubleshooting.html
index 2a41666054a..16a2c116c85 100644
--- a/src_assets/common/assets/web/troubleshooting.html
+++ b/src_assets/common/assets/web/troubleshooting.html
@@ -131,6 +131,7 @@ <h2 id="logs">{{ $t('troubleshooting.logs') }}</h2>
     import { createApp } from 'vue'
     import { initApp } from './init'
     import Navbar from './Navbar.vue'
+    import fetch from './fetch.js'
 
     const app = createApp({
       components: {
diff --git a/src_assets/common/assets/web/welcome.html b/src_assets/common/assets/web/welcome.html
index 18c67b2ee79..281533a4a19 100644
--- a/src_assets/common/assets/web/welcome.html
+++ b/src_assets/common/assets/web/welcome.html
@@ -55,6 +55,7 @@ <h1 class="mb-0">
   import { createApp } from "vue"
   import ResourceCard from './ResourceCard.vue'
   import { initApp } from './init'
+  import fetch from './fetch.js'
 
   let app = createApp({
     components: {
diff --git a/third-party/jwt-cpp b/third-party/jwt-cpp
new file mode 160000
index 00000000000..08bcf77a687
--- /dev/null
+++ b/third-party/jwt-cpp
@@ -0,0 +1 @@
+Subproject commit 08bcf77a687fb06e34138e9e9fa12a4ecbe12332
diff --git a/vite.config.js b/vite.config.js
index 8732f1a08c7..2f55ec99833 100644
--- a/vite.config.js
+++ b/vite.config.js
@@ -47,6 +47,7 @@ export default defineConfig({
             input: {
                 apps: resolve(assetsSrcPath, 'apps.html'),
                 config: resolve(assetsSrcPath, 'config.html'),
+                login: resolve(assetsSrcPath, 'login.html'),
                 index: resolve(assetsSrcPath, 'index.html'),
                 password: resolve(assetsSrcPath, 'password.html'),
                 pin: resolve(assetsSrcPath, 'pin.html'),