Only accept POST requests for logging in and requesting password resets