Better check for allowed methods in default audit mode

Previously, we logged e.g. HEAD and OPTIONS method, which was nothing
but stupid.

Change-Id: I82afe384666bb1e41a7b97813f76828869799f11