Require POST on effectful methods in group editor

Why I didn't do this originally, I'm not sure.

Also, TIL, if you use __lookup__, whatever you return will be treated
like a Controller, regardless of whether it actually is or not.