Require verify_code action to be POST [fixes #203]