Remove dead code and fix test.

test_not_allowed now uses the real @require_POST decorator instead of
faking its behavior.

Dropped an old codepath that I guess I left in.