add HEAD to all non-ajax GET routes