[feature] /auth/login now can respond to JSON