Only support HTTP GET on most routes

With the exception of the main publication method (which uses POST to
handle some local transactions) most of our routes only need to support
HTTP GET. Explicitly restricting them to GET makes them easier to cache.
Allow get/post for main publication route

It currently needs to accept posts for some place/local transaction interactions
Merge remote-tracking branch 'origin/restrict-http-verbs'