isAllowedHttpHeader = function(header) {
    return disableHeaderCheck || (header && forbiddenRequestHeaders.indexOf(header.toLowerCase()) === -1);
  }
Check if the specified header is allowed.

@param string header Header to validate
@return boolean False if not allowed, otherwise true