Credentials are stored in config.json. Update that file to change username/password. Session is cookie-based.
config.json