return status 200 instead of 302 when login