One route for GET and POST new session.
$this->generateUrl is evil.

It messes your request.
/ accepts GET and POST.