Added CORS header AllowedHeader