Methods that change article status should be POST

[nathan-osman]

Currently these methods require authentication but they accept a GET request. This is a security concern.