Use JSON for all error bodies, not just some

* We always sent content-type application/json for error responses, but we weren't always sending back application/json.