login route is a get route