read-only rest api works with limited hard-coded content-type