* separate http_check_allowed_methods()