protect included response from setting headers