Add test for non-GET requests

* Check that we get a 403 result.