add allowed header test