change HTTP verb for login form from GET to POST