Forbid POST to restricted URLS instead of redirecting.