The action you have requested is not allowed. when doing $POST request here is my code in my controller: