req.setRequestHeader("Accept", "application/json"); endpoint security download endpoint security benefits