ACIK fix and custom request headers

It is ok to disable validation in test code, but doing it in product code is not good. What is the exact problem here...?

In any case, please put a //TODO:alias - comment.