CSP endpoint only accepts POST requests. Fixes Rails 4 compatibility.