Platform sign in

Uses platform_session — not the product app cookie.