check if .method matches

was really confused why `.post()` routes were called on `GET`.