CSP endpoint only accepts post requests.

This fixes compatibility with Rails 4 where the ```match``` routing option is no longer available.

The W3C spec says that the reports should always be POST requests.

http://www.w3.org/TR/CSP/#report-uri