added fileupload headers to allowed headers