support HEAD request
do not need to decode URI param; should already be done