HTTP GET is idempotent by the spec. If you login by visiting URL it is not according to the HTTP spec. You should any case have a button that says Login and doe

HTTP GET is idempotent by the spec. If you login by visiting URL it is not according to the HTTP spec. You should any case have a button that says Login and does HTTP POST.