Apply consistent HTTP method validation to whitelisted callback dispatch

Ensures callback dispatch validates HTTP methods consistently, closing a permission bypass.