I don't think allow_duplicate_authorization_header is a valid field in the code. This is not going to work.