Only delete from POST; GET should be idempotent

Changes suggested by @jensj
Merge pull request #65 from serra/confirm_delete

Only delete from POST; GET should be idempotent