Login user and respond with JSON along with auth cookie