Only delete from POST; GET should be idempotent

Changes suggested by @jensj in #26