add allow methods header