working login POST and return value - getting a session, yeah!