Programmatically, there are currently two options to log into the REST api. You can use:
- HTTP Basic Authentication  The httpWatch web site describes the general process.  Since it all occurs via TLS, this is quite secure
 
- JSON web Tokens (JWT).  Refer to the wikipedia description for more info.