do not react on HEAD requests, these may be sent without user interaction