Fixes #22: check that REST server correctly handles user-related headers