add Content-Type to allowed api headers