- add server headers during HTTP handler delegation rather than at HTTP response time - remove all old header setting locations - remove unused status writer and other response code - add manual set on authentication for session headers