REST: reject invalid Content-Type header