Tighten up the HTTP methods we allow