login: reorder the conditionals to keep it cleaner.

We're going to have even more conditions for method == 'POST', so keep
it as elif/else.