only allow GET for index page