This issue can be closed. It turned out it actually was the firewall filtering out response headers and thus causing this behaviour.