testing options handler proc
add way to customize access control headers