Fix allowed headers and methods.