Policy statements from config should match also via method

[Verdent]

This is an enhancement of the issue #8948. Currently we do match the policy statement configuration only via path. In addition to that, it should be also possible to match it via request method. (POST, GET, ...)