Use POST for subscribing/unsubscribing from forum topics.

Use POST request with `authenticity_token` instead of GET to protect topics (un)subscribing process from CSRF attack.