Only allow get and post requests

Sometimes bots will hit this view with HEAD requests which
generates exceptions. This should enable Django to return
a proper HTTP response code saying that method is not allowed.