minor changes on the response of GET and POST methods of 'login';