added in Content-Type as allowed header