Require login and exact HTTP methods