Implementing POST /login, I think

Closes #12