Use Post method to authenticate (easier to do with Insomnia or Postman, rather than a browser app).