def user_login(session, username, password):
    """Log a user into NEXT

    Args:
        session:
            obj: a request session
        username:
            str: the username of the user you want logged in
        password:
            str: the password of the user to be logged in
    """
    login = {"id": username, "password": password}
    response = session.post("http://rbac-server:8000/api/authorization/", json=login)
    if "token" in response.json():
        token = "Bearer " + response.json()["token"]
        session.headers.update({"Authorization": token})
    return response