Fix allow headers