Updated index.php

Added 2 options for allow header - 1. All domains and 2. appsec domain