Require RAINMANT_API_KEY, only allow GET