changed login from get to post