fixed loginservlet to be post and json