Restrict API methods

It is better to show 404 than raise an exception saying that action was
not implemented on controller
Merge pull request #147 from alphagov/cleanup-api-methods

Restrict API methods