Ensure behavior-affecting headers are excluded

Ensure content-length is always stripped from client headers

Add dependency docs