Should be returning a method not allowed when not a POST