let's prevent __proto__ as a header value, too
log4js doesn't take functions, more's the pity