login from "POST" to "GET"