fixed acces control header in BaseController