additional validation of Range request header per @sprater review