update middle ware allow headers