Sets up empty SessionOptionSetController

Creates the SessionOptionSetController, configures the routing, and fills
it with MethodNotAllowed methods + tests.