Should we constrain this to HEAD and GET requests?