get headers by name, get security header