allow get request to sign in via api.