Disallow update via GET request in production