Move {add,remove]_tenant to use POST requests