Validate HTTP method on API access