UK: allow head requests to XFormSubmissionApi.create