fix bug bug 1142228 - HTTP verb tampering