Add login endpoint with proper http return value