diff --git a/RPC/server.go b/RPC/server.go
index f6b43f3..bfd9cf8 100644
--- a/RPC/server.go
+++ b/RPC/server.go
@@ -21,7 +21,9 @@ func StartApiServer() error {
 	if Common.ApiAddr == "" {
 		return nil
 	}
-	if Common.SecretKey == "" {
+	if Common.SecretKey != "" {
+		internalSecretKey = Common.SecretKey
+	} else {
 		internalSecretKey = time.Now().Format("20060102150405")
 	}
 
@@ -77,7 +79,7 @@ func applyMiddlewares(handler http.Handler) http.Handler {
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		w.Header().Set("Access-Control-Allow-Origin", "*")
 		w.Header().Set("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS")
-		w.Header().Set("Access-Control-Allow-Headers", "Content-Type, Authorization")
+		w.Header().Set("Access-Control-Allow-Headers", "Content-Type, Authorization, Fscan-API-SECRET")
 
 		if r.Method == "OPTIONS" {
 			w.WriteHeader(http.StatusOK)