protection API to pass request header and few CR comments
merge