/api/flairlist needs GET only