Only allow HTTP PUT methods through the publishing-api

For now, we don't want to support the other HTTP methods through this
host/application. We can implement them later when we're ready.