Altered security filters in order to support filtering by HTTP method as
well as URL path.
Fixes for Iteration 3: changed security filter to work based on URL _and_ HTTP method allowed; fix for client setting no Accept - header - default to JSON-LD as serialisation returned.