Easy one, POST to "/sessions". The idea is to think of "things" that you are manipulating, in this case creating a new user session.