Create portal purchase invoices only through POST

Allows only POST for the supplier portal's purchase invoice creation and moves the action into a POST form with a CSRF token.