allow non-GET request methods