Return empty json from login, instead of just 200