If the HEAD request returns 405, try both GET and OPTIONS rather than relying on them telling us what methods are allowed.