Non-null when login succeeded — contains login_response and headers keys
Non-null when login triggered 2FA — the longest base64url token from the response
Non-null when login succeeded — contains login_response and headers keys