Fix bug: escapes POST data when login