fix: correct allow header methods list for 405s (#9655)
fix: prevent routes/layouts from having conflicting files through resets or different extensions (#9590)
fix: prevent unhandled exceptions for invalid header values (#9638)
