added POST method to /login