handle /users/login/<login> requests on the API