This is more secure than do the request with sensitive value like password into URL parameters.

Replace the GenericApi class by two classes, Login and Status, else the
endpoints would be /generic/login and /generic/status.

param reset=1 on login call.

data files must be stored outside of documents directory.