HttpResponseNotAllowed takes a list of allowed methods.
Add test for machine and property names with slashes in them.