handle HEAD requests not being allowed