Make sure RestrictHttpMethodsFilter is always the first filter, otherwise we
will get misleading error messages