login, do a GET