GET request to mark HM as Attended

For some inexplicable reason I made ```@attendance_bp.route('/attendance/alter/hm/<uid>/<hid>', methods=['GET'])``` a `GET` request. No idea why, it totally breaks the RESTful standards. 

Nonetheless, it should be fixed.