client: POST login button