call HTTP.methods on server only