HTTP: do not allow GET with body data

Signed-off-by: Eduardo Silva <eduardo@monkey.io>