require specific http verbs
use 303s instead of 307