feat(server): make header-only requests work

fixes #605