[bug 937183] @require_POST for logout view.

As commented in the bug, I just made the logout view require POSTing so that we just use our CSRF infrastructure for clickjacking and it won't work by giving the URL to an `<img/>` as it's `href`.

Pretty straightforward. r?