Restrict actions to GET verb

Rails 4.0 requires that routes using match must specify the request
method.