✅ /login endpoint is alive (GET used for test)