HaMasterCheckFilter permits non-GET/HEAD requests with Brooklyn-Allow-Non-Master-Access