fixes to http validation