access request headers via env