Disallow HTTP methods other than GET/POST/HEAD