Improved unit-test of login, but the authentication still fails in server.post statement