Fixed issue #5: allow additional headers
And now fixed issue #5 also for the ACL plugin
Fixed issue #4: Return response body on non-207 responses

BACKWARD INCOMPATIBILITY: the callback function to supply as an argument for
the client.head function now has the standard signature (status,body,header)