check headers

Сheck the headers in the request

In the absence tests, on our roadmap :) could you please add another request/response pair to demonstrate how the header matching works. Perhaps a `401` response where there is no `Authorization: Basic ...` in the header :+1: