CF headers in origin request policy are available to functions