header validation (work in progress)