deputies allow acces control headers