EZP-22048: Added X-Siteaccess to allowed headers