changes login method to POST