rest: reject incorrect content-type header