Change user_credential method to POST.

Fix user_credential method to avoid visualize password as query parameter.