change login to use POST(get for test)
private/public file toggle