API- email & password in params