only specific request formats are allowed