updated login to use post instead of get