add Content-Type to allowed headers