/api/allowed use POST now

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
Make sure /api/allowed return 200 status code

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
Merge branch 'internal-api-post' into 'master'

Internal api post

See merge request !1059