fix and security

disallow DELETE and PUT methods, assuming we can discern between valid
and "evil" POSTs
Uncommited changes

Some cosmetic fixtures, as well as a firstrun check