The admin_token from the server's config.json. Stored only in this browser. Or use an admin client certificate (rollcall admin-cert request NAME) and the browser signs you in by itself.
admin_token
config.json
rollcall admin-cert request NAME
This page came over plain HTTP: the token crosses the network unencrypted. Use HTTPS after trusting the installation's CA certificate .