Verb of object session token is not checked

[cthulhu-rider]

Originally posted by @KirillovDenis

Verb of the session token attached to the object request should correspond to the operation.

Expected Behavior

Storage nodes denies request with wrong token verb.

Current Behavior

Request is processed.

Possible solution

Node can:

1. Deny the request.
2. Ignore session token and process the request without it.

IMO 1. is more clear.

Steps to Reproduce (for bugs)

1. Attach session token with verb other than the object request one.
2. Send the request.
3. Receive OK status.

Your Environment

• Version used: v0.27.5