remove content-type header

Just used for testing CORS.  No need for this.