changes in request header validation