The HTTP request headers that are allowed
Under the hood: Sets Access-Control-Allow-Headers
final List<String> allowedHeaders;