removed POST requirement for admin login, fixes #324