Fix: never return response body for a HEAD request