Add a basic test of the Content API

This tests it via the public route (host), but that is an nginx proxy to the
real app anyway.