Switched login via /authentication to POST