restricted DELETE actions to POST requests only