Login API converted from GET to POST