Allow only POST on services

Allowing GET may lead to a security break in the future.

JsonClient uses by default POST, AutoJsonClient uses only POST. Scoobydoo and Casper both use AutoJsonClient, so no modification need to be done to them.