Enforce POST for /login_check

Fixes #1100