login then POST