including HEAD in list of default allowed methods