These headers should be set by the webserver, we should also work on testing.