fix(MethodHandler): set Allow header to allowed methods

closes #24