add headers to api controller