[#1015] Only allow GET and HEAD to be redirected

POST can't be safely redirected, which is what broke comment posting
(because we posted to https... and it then tried to post to HTTP)

Fixes #1015.