Adjust API headers, limit HTTP methods