Adding a configurable AllowedMethodsFilter which allows all standard methods except TRACE and CONNECT by default. This is enabled on both the application servlet and admin servlet.
Merge pull request #581 from reines/allowed_methods

Adds a configurable AllowedMethodsFilter.

By default, permits GET, DELETE, POST, PUT, PATCH, HEAD and OPTIONS; preventing TRACE and CONNECT. This is enabled on both the application servlet and admin servlet.