add http header fields verification