ca: decouple http headers from resources and services