Return HTTP method list. Use json for security reasons.

def _parse_methods(cls, list_string):
        """Return HTTP method list. Use json for security reasons."""
        if list_string is None:
            return APIServer.DEFAULT_METHODS
        # json requires double quotes
        json_list = list_string.replace("'", '"')
        return json.loads(json_list)