It turns out everything was fine but we cached a 500 from the initial headers fiasco
Removing dev console.log and timeout