Do not throttle login requests except POST requests

Follow up from #71 
Hmm shall I remove it? I wanted to ensure `GET`s are allowed as many as possible (=no throttle) but then I realized that view does not accept `GET` at all.. and somehow the test remained `;]`