Allow only POST.