testing xhr response headers