test for put returning forbidden when not an http allowed method