Only delete from POST; GET should be idempotent

Changes suggested by @jensj
Merge branch 'confirm_delete' into template_review