update login method to POST