app route login methods GET POST def login if request headers get X-Re

@app.route('/login',  methods=['GET', 'POST'])
def login():

    if request.headers.get('X-Requested-With') == 'XMLHttpRequest':
        email = request.form['email']
        password = request.form['password']
        res = db_session.query(db.Client).filter_by(email=email).first()
        if res:
            if res.check_password(password):
                login_user(res)
                return redirect(url_for('login'))
            else:
                error = 'Пароль не правильный'
        else:
            error = 'В базе нет такого пароля'
    else:
        abort(404)
    return jsonify(error=error), 401