adds tests for new allowed-methods behavior