fixed header injection twice bug
bump to version 3.1.28