Hey,
you have to send a POST request and don't send the data as GET parameters. You blurred out the pw and user, but since you've set them as GET parameters they are visible in the url, so maybe also blur that if you don't want people to see your password.