Start to make potentially expensive operations POST-only.

This will help prevent triggering a refresh accidentally, such as
when restoring a browser session after a crash.
Merge pull request #253 from plomino/jean-manage-postonly

Start to make potentially expensive operations POST-only.