rest: Use post for destructive operations

Operations with side effects should use POST not GET also add more tests
and fix bugs found during testing.