/transaction/cancel is now POST