just testing post requests, this is not really how authentification would be secure