Allow POST to /login.json to login