User proper Allow. Strip spaces from method names

Previous implementation forced a return value of "allow: GET,HEAD,POST,OPTIONS,PUT"