Re-add GET/HEAD validation that was removed too eagerly