handle comma-separated request header values
add testing for request and response headers