title: Limiting HTTP verbs on every action
body: <p>Is it a good practice to limit the available HTTP verbs for <strong>every</strong> action?  My code is cleaner without <code>[HttpGet]</code>, <code>[HttpPost]</code>, <code>[HttpPut]</code>, or <code>[HttpDelete]</code> decorating every action, but it might also be less robust or secure.  I don't see this done in many tutorials or example code, unless the verb is explicitly required, like having two "Create" actions where the GET version returns a new form and the POST version inserts a new record.</p>