With the login5 token endpoint we can save time in the startup time by requesting a token via login5 and use it to start the websocket along with the REST API, we can then start the internal Hermes connection using the same token or with username/password.
The Hermes API should be used as little as possible as it's not going to live in the future. This probably addresses #308 partially.