don't inject response anywhere.
capture headers from Drupal API.
Controller for delivery and response both rely on execute action.