LEDGE-252: switch from JSONP to POST with CORS (login action)