Allow only GET/HEAD/POST

[ghost]

This aims to fix H1-117142.

Should we add tests for this?

[ghost]

(Writing the tests anyway since I never did this with aspen)

[chadwhitacre]

Yay tests! 💃

Since we already have a .travis.yml (we're using Travis for deployment), how about modifying it to actually run the tests now that we have some? :-)

[ghost]

Let's see if everything works before trying to add cache.

[chadwhitacre]

Skipping a deployment with the heroku provider because the current build is a pull request.

https://travis-ci.org/gratipay/inside.gratipay.com/builds/145687885#L241

👍

[ghost]

for allowed in ['GET', 'gEt', 'POST', 'HEAD']:
        response = client.hit('GET', trace='/')

Why ._____.

Fixing this.

[chadwhitacre]

?

[ghost]

I'm always doing 'GET' request in the test, but 4 times, rather than trying the different allowed methods. I'll fix it while introducing new tests in #788.