ask before executing non-GET in api browser

fixes #Graylog2/graylog2-web-interface#213