An 'Allow' header is mandatory in error 405

see http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.6 and https://tools.ietf.org/html/rfc7231#section-6.5.5