Explicitly only handle GET requests

403 on other methods