Try to use HTTP headers for verification correctly.