But the return value would never be read because `HEAD`.

In fact, I guess I can merge this. I hope nobody will ever want to login with a HEAD request. This is a little ugly, is that okay if I keep the right to fix it at some point ?