Bypassing URL Authentication and Authorization with HTTP Verb Tampering

More: continued here