responds method not allowed unless GET