I'm not sure I follow why the "doLogin" method should be accessible through a `GET`