add Content-MD5 to allowed headers