login should repond to POST requests as well
Basic test setup along with auth bypass