adds Vary: Accept-Encoding header
more custom headers
removes duplicate http header, sets origin control to maxlielje.co instead of *