The content-length header is optional as per the HTTP spec. However, it enables the client to close the connection by itself instead of having the server do that. We have seen traces where the client keeps the connection open for longer than necessary. Adding a content-length header should fix this for /auth-check. Change-Id: Ib3963558f10b9c03dce2054d93061a6c852af34a