CSP endpoint only accepts post requests.

This fixes compatibility with Rails 4 where the ```match``` routing option is no longer available.