Sent login details as header to prevent malformed URL