/users/login now uses AJAX