add more validation
add client limits and session config mapping
more header mappings