fixed http method now allowed