Enforce POST for /login_check