Deny non-GET and HEAD requests