hsa: fix http response