v0.2.61: login key-exchange tries new endpoint then falls back to old (dev/prod compatible)