Why pretend request headers don't exist? Any app can send a request header to the same URL and have the response tailored, or am I missing something here?