https://cloudutsuk.com/posts/cybersecurity/owasp/request-missing-an-accept-header/