again the question why we even do that. would it not be enough to mark the request we intercept in the request event as an authorization information and then not tag the response as usual? no need for a HEAD request when going to a specific URL.