This is probably an issue with the CSRF-token. Make sure you have this in your for
// Blade
<form action="/signin" method="POST">
@csrf
// Your form here
</form>
// Regular php
<form action="/signin" method="POST">
<input type="hidden" name="_token" value="{{ csrf_token() }}">
// Your form here
</form>
The session is normally set to 2 hours. If you're past this point, your CSRF-token is not valid anymore and you will get this 419 error.
Another issue here, don't use $_POST. This is unsafe since the input is not serialized. You can use the request object instead