redhotpenguin: add 405 method; deny non GET pre-authenticated requests