Applied PreventCrossUserManipulation attribute to POST and PUT requests