POST `service` to /login rather that as query parameter.