it could be a possible replay attack. This commit also fixes #505, by returning MethodNotAllowed instead of NotImplemented