only send Disallow headers if Allow headers were sent