this looks wrong to me:

- the strings needs to be escaped to be valid JS
- you should set only this header, not remove all other headers at the same time