updated js login
updated sessionApi. Login works now via POST