Do not honor the X-HTTP-Method-Override if the original method used was GET. GET's are supposed to be a safe operation. Require a non-GET method (POST is suggested) in order for the override to occur.