/user/login no longer expects params inside a LoginResponse object