Only validate in POST

Signed-off-by: Gawain Lynch <gawain.lynch@gmail.com>