use POST to send login credentials
added CodeIgniter CSRF cruft