Fix Content-Type coming from /api/auth_status

Even though we were sending JSON in the body, it was being sent
with the Content-Type as 'text/html'. This fix means it'll be
sent as 'application/json'.