basic responses, header validation, some tests