resolves #52: don't force POST in verify, enable and disable actions