GETs the Django login page (to obtain the csrftoken cookie and the hidden
csrfmiddlewaretoken), then POSTs the credentials. Returns the cookie-jar
path for reuse by authenticated requests.
.hhs_login(email = NULL, password = NULL)The path to the session cookie jar (a tempfile).
Subscriber credentials (resolved from args / options /
env vars when NULL).