fix verification problems where there's no "to" header