Use common method to make sure only POST is allowed