can we do this check without instantiating these objects? at first at least 90% of requests won't have this header, so we're creating objects just to throw them away here i think