Since we're doing improvements... Change this to an EmptyResponse as well, with a 405 Method Not Allowed response (that response should also include an Allow header).