scrub request headers