add multi allow header