use status 307 for anything but GET or HEAD