fixes #20 restrict sending emails to POST requests