Add request method to conditions of CsrfMiddleware.php

The rationale behind this is that the CsrfMiddleware could be included in the application middleware stack to enable csrf protection on all post requests (of course for APIs, one would have to tweak the handle method to account for that too, but for "web" controllers it would work out of the box).