Adds documentation for new app-wide configuration of allowed headers