Ensure correct HTTP verb for session modifying links. They were GETs and Chrome was double sending them