adjusted access control headers