don't rely on the Content-Length to be the last HTTP header