allow HEAD method with GETs