fixes #18 adds tooltips
fixes #20 restrict sending emails to POST requests
restricted DELETE actions to POST requests only