Revert "allow cross-site json access"

This reverts commit c81bdffb1896231656934904f72f31572c29cc1e.
Revert "use 201 Created instead of redirect on successful post"

This reverts commit 8df0efa455f2388d6d3fb4409a46b3c67611a2e3.