Only allow GET, OPTIONS and HEAD -requests to REST-api