Properly handle a HEAD request with a 200 response
Do not pass on instances from parent User instance, rather clone to release session.