problems with auth POST - getting a 301 code