hmm I definitely prefer these here since upstream middleware may be acting on these headers