server can redirect and accept posts
login sends post, creates cookie