allow session to specify its own POST routes