* Add AllowedHeader and fix AllowedOrigins in the API * Update changelog entry * Fix wrong response conversion