modify allow headers
Signed-off-by: JohnMave126 <johnmave126@gmail.com>