Only accept post params for certain actions