Created allow_method decorator

It only checks for the ALLOW_DELETE config at the moment. Maybe would be useful
to globally prevent other methods like POST in the future.
Merge branch 'allowmethod'