use the appropriate code for 'method not allowed'