http: allow GET, HEAD for /v2/machines