Facet restriction from the browser should not use PUT

[distobj]

Facets of an exhibit session are currently modified using HTTP PUT. Though this might be considered the correct method from a purely "API" POV - and may be retained for that reason - it's a bad idea to use it from a browser because it doesn't reflect the actions of the user (who is effectively performing a GET).