Always set headers, even if site is public