API: move login, logout, lastfm calls to HTTP POST method