[core] Disallow TRACE and TRACK HTTP methods

Using middleware to disallow methods.