Fixes edit_poster view, prevents CSRF

Also, uses HTTP 303 to redirect from POST to GET.