Some fixes
- Don't distinguish between POST/PATCH/PUT in allowed methods array
- Use method constant as default value in blueprint
- Use flush instead of commit to keep session open