Fixing `allow` header decoration on all `400` series codes except `404`