You shouldn't be able to POST to `/`, should you?