GET /multiple-allows