* Controller always starts a session
* Api accepts CURL options
* Router accounts for querystring parameters when parsing actions