List of allowed headers to be set by the user. Suggested to use for if authentication lives behind reverse proxies.
string or list of string
[ ]
