Request headers browsers may send (Access-Control-Allow-Headers).
Access-Control-Allow-Headers
final List<String> allowedHeaders;