Changed the haas api to respect HTTP method guidelines.

Two api calls which were using GET to mutate state are now using POST
and DELETE.
Changed the error codes returned by a couple api calls

400 -> 404; 400 is for syntactic errors, which for these cases isn't
really the problem. Not found makes more sense.