change headers to use controller response  to set headers instead