HEAD not listed in allow header in 405 (method not allowed) response

The allowed methods listed in the allow header of a 405 (method not allowed) response are incorrect.

Steps to reproduce:
Run the hello world example. The only methods that should give a response are HEAD, GET and OPTIONS.
OPTIONS correctly returns with the following in the allow header: HEAD,GET,OPTIONS

When making for example a DELETE request the result in the allow header is incorrect

Expected: HEAD,GET,OPTIONS
Result: GET,OPTIONS