Allow GET and POST on AJAX controller

Signed-off-by: Gawain Lynch <gawain.lynch@gmail.com>