20140829 give a third solution for rest api auth, a POST request with username and password to api/login directly