no characters allowed before header() calls