Fix to postOnly filter returning HTTP 400 instead of 405

Previous change now includes the "Allow: POST" header as required by RFC2616.