[CNS] api.lua: drop header fields from HTTP/1.1 303 status-code responses (related to #299)