Created allow_method decorator

It only checks for the ALLOW_DELETE config at the moment. Maybe would be useful to globally prevent other methods like POST in the future.