updating controller to allow login by get