User auth via POST to /api/login works
User auth working