The first request returns 401 and the client opens this login in a browser. Sign in with a customer-portal account, then the app can run read, write, grep and shell commands in your own sandboxed workspace.