allow HEAD for GET method endpoints

did some integration testing too