generate the allow header for method_options