trying to allow unsafe headers