Change phase from "request" to 1 for rule 900012

The tx.allowed_methods macro is needed in phase 1 but the config file
only sets it in phase 2 (request). This always triggers rule 960032 in
base_rules/modsecurity_crs_30_http_policy.conf.