POST /login with {email: admin, password: admin}