Change coffer_http_util:not_allowed/2 to take a binary instead of a list of binaries

Since AllowedMethods (in coffer_http_util:not_allowed/2) is only used as a response, I think it would be cool if we join HTTP methods (with a comma) ourselves.

any idea?