allow gets and posts for apps using it