POST login request is treated as XmlHttpRequest