Check for existing X-Powered-By header before setting it in WebResponse, closes #640