Allow :any as allowed headers setting