add accept-post header
add correct spec for cookie
add transparent content negotiation spec