v1.3.0
#29 - Enables HEAD
as an allowed unauthenticated method.
The logic for determining whether a route is protected only allowed GET
as a read-only method.
This meant that whenever a HEAD
request is issued a user would be redirected to the authentication page.