fix so firefox can post the access_token due to a different Content-Type header