/api/allowed use POST now

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

lib/api/internal.rb

@@ -12,7 +12,7 @@ module API
       #   ref - branch name
       #   forced_push - forced_push
       #
-      get "/allowed" do
+      post "/allowed" do
         # Check for *.wiki repositories.
         # Strip out the .wiki from the pathname before finding the
         # project. This applies the correct project permissions to

spec/requests/api/internal_spec.rb

@@ -155,7 +155,7 @@ describe API::API, api: true  do
   end
 
   def pull(key, project)
-    get(
+    post(
       api("/internal/allowed"),
       key_id: key.id,
       project: project.path_with_namespace,
@@ -164,7 +164,7 @@ describe API::API, api: true  do
   end
 
   def push(key, project)
-    get(
+    post(
       api("/internal/allowed"),
       changes: 'd14d6c0abdd253381df51a723d58691b2ee1ab08 570e7b2abdd848b95f2f578043fc23bd6f6fd24d refs/heads/master',
       key_id: key.id,
@@ -174,7 +174,7 @@ describe API::API, api: true  do
   end
 
   def archive(key, project)
-    get(
+    post(
       api("/internal/allowed"),
       ref: 'master',
       key_id: key.id,