match mocked request headers to really close #163

sorry, no tests -- i couldn't make sense of the test suite ... :/ but this resolves #163, see my comment about it not actually performing any checks on the request header -- so now it does. thank you