better sanity check for http requests