- throw 'bad verb' if no verb is given in oai -request

- handleGetRecord: break if no identifier is given
- handleGetRecord: break if no metadataPrefix is given
- allow post and get for oai requests

app/Http/Middleware/VerifyCsrfToken.php

@@ -11,6 +11,6 @@ class VerifyCsrfToken extends Middleware
      * @var array
      */
     protected $except = [
-        //
+        'oai*',
     ];
 }