added allow_x_headers to the Configuration docs