api: ability to specify allowed methods in api decorator