Restrict match route for find to get requests

By default `match` allows all methods when none are specified,
which would be a security risk:

    https://github.com/rails/rails/commit/56cdc81c