add OPTIONS to valid http request types; fix typo

$request_method test was restricting OPTIONS requests, which we use (CORS). $request_method test also had an extra closing brace ("}").