Deny non-GET and HEAD requests
Support OPTIONS method