spec response headers are correct