Use a 401 for methods not allowed