restrict to finite set of HTTP methods