POST request is not authenticating