Be less strict about http headers allowed