login: function(username, pw) {
    return _.ajax({
      verb: 'POST',
      url: '/login',
      data: {