add accept to allowed headers