Limit allowed HTTP verbs to elasticsearch

Only allow GET, HEAD and OPTIONS.
We do not want people writing to our log indexes from outside our
network.