change login method to post