Allow only POST method on actions