FIX: basic security middleware not working. Switched from opt-in to opt-out mode (only GET and HEAD allowed).
0.6.2