remove header internal-request bypass