header verification