Switched to POST

Switched to prevent user/pass from being in url