+ allow HEAD for all resources