add 'POST' to user_athentication