bugfix. copy http headers from session object. closes #6