add allow method for POST