The 'api_method_not_allowed' method requires two arguments:
the request and the allowed methods to be listed in the Allow header.
However, the allowed_methods argument was missing from some calls,
resulting to unexpected failures.
This commit fixes these issues.