Oops - users/auth is GET not POST