you can also do it via http response header, feels cleaner to me