(Bug 4715) Require POST requests

Also make sure that we return a JSON error message if not logged in