Comment by sublinear

Auth requests are for a new session ID, not a new user ID.

It's a (C)reate in CRUD, not an (U)pdate.

POST - Create, GET - Retrieve, PUT - Update, DELETE - Delete